FLISQLegal
Privacy Policy
What FLISQ keeps about you, why and for how long, who can see it, and how to delete your account.
Who we are
FLISQ is a messenger for the employees of one organization. Accounts are issued only by its administrators: there is no public sign-up. The service and data operator is JASE GAEL ALLISON, an individual. In this policy “FLISQ”, “we” and “us” refer to this operator. Contact: privacy@flisq.io.
What we keep about you
- Full name and employee number, if your administrator entered them when preparing your sign-in code. They are kept in the administrators’ records, not on the messaging server and not in your device certificate, for as long as your account exists.
- Display name and @username you choose. Colleagues see them in the directory. The history of changes is kept while your account exists, so administrators can look into abuse.
- Account and device identifiers, device certificates and public keys, and the platform of each device (for example, iPhone or Mac), so that messages reach the right devices and keys can be verified.
- Push notification tokens, so your devices can be notified. By default, notifications don’t include message text; you can turn previews on in Settings.
What we can’t see
Messages, attachments and calls are end-to-end encrypted, and the keys exist only on your devices. We can’t see their content, group names and members, avatars, contact lists, read receipts, drafts or settings. We keep no call history, no record of who called whom and no logs of IP addresses. Your online status exists only in memory.
What the server holds, and for how long
| Data | Why | How long |
|---|---|---|
| Encrypted messages waiting for delivery, and their recipients | Delivery | Until received, 14 days at most |
| Encrypted attachments | Photos, files and voice messages | 14 days after upload |
| Scheduled messages: encrypted text, sender and recipients | Sending on time | Until sent, 1 year at most |
| An ongoing call: the devices in it and their IP addresses | Carrying audio and video | In memory, until 1 minute after the call |
| People you blocked (identifiers) | Not delivering their messages and calls | Until you change the list |
| Reports against an account: a count per reason, not who reported and not the message | Acting on abuse | 183 days after the last report |
| Push tokens | Notifications | Until the device is removed |
| Sign-in and device-linking requests | Issuing a device certificate | 15 minutes to 30 days |
| Database backups | Recovery after a failure | 7 days at most |
While a message is being sent, the server sees which device sent it and to whom.
On your device
- The app’s database and files are encrypted with a key kept by the system. You can lock the app with a passcode or Face ID.
- Call history and the diagnostic log stay on your device. The log leaves it only if you share it yourself.
- The app asks for the camera (video calls, photos, QR codes), the microphone (calls and voice messages), photos (to send and save them), Face ID (app lock) and the local network (direct calls between devices on the same Wi-Fi). On Mac it can also ask to record the screen, to share it in a call. Everything else works without any of them.
What we don’t do
- No ads, no analytics, no tracking, no third-party SDKs that collect data, no advertising identifiers.
- We don’t sell your data or use it for advertising. The messaging servers are hosted by DigitalOcean; they do not hold the keys to decrypt your conversations.
- Notifications are delivered by Apple Push Notification service and, on Android, Firebase Cloud Messaging. They see that a notification was sent to a device and when, but not what it says.
This website
flisq.io sets no cookies, runs no analytics and loads nothing from other sites. It is hosted by Vercel, which processes standard request data, such as your IP address, to deliver the pages. If you email us, we use your message and address to handle your request and any necessary follow-up. Support mail is forwarded by ImprovMX to the operator’s Google Gmail inbox. Email is separate from FLISQ’s encrypted chats: don’t send passwords, sign-in codes or private conversations by email.
Deleting your account
In the app, open Settings → Privacy → Delete Account and confirm with Face ID or your passcode. All devices of the account are signed out and the app’s data on them is erased.
On the server we erase at once your name and @username with their history, your full name and employee number, scheduled messages, keys, waiting messages and push tokens. What remains is an opaque account identifier and a record of the removed devices (identifier, platform, time) for 400 days, so your colleagues’ apps can take you off their contacts. Backups are kept 7 days at most. Your administrator can delete your account the same way.
Your choices
You can ask what data about you we keep, have your full name corrected through your administrator, and delete your account at any time. Write to privacy@flisq.io.
Children
FLISQ is a work tool for employees and is not meant for children.
Changes
If this policy changes, we’ll post the new version here and update the date at the top.